System monitoring and auditing is used to determine if inappropriate actions have occurred within an information system. System monitoring is used to look for these actions in real time while system auditing looks for them after the fact. Without system monitoring and auditing it can be difficult to determine when a failure of the information system security, or a breach of the information systems itself, has occurred, and the details of that breach or failure.

This Systems Monitoring and Auditing Policy Template includes the following sections:

• Default policy statements that define what the enterprise must do.
• Default procedures that define how the enterprise must do it.
• Baseline recommendations to customize the template to individual enterprise requirements.

Use this and the related templates to build an efficient and effective enterprise Security Policy.